AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2015-0803

HIGH · CVSS 7.5 EPSS 3.67%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2015-04-01 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2015-0803
Severity
HIGH
CVSS
7.5
EPSS
3.67%
Firefox

Original NVD Description

The HTMLSourceElement::AfterSetAttr function in Mozilla Firefox before 37.0 does not properly constrain the original data type of a casted value during the setting of a SOURCE element's attributes, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via a crafted HTML document.